PressTigers Simple Job Board plugin versions up to 2.13.7 suffer from an insertion of sensitive information into sent data, which allows an attacker to retrieve embedded sensitive data. This results in the exposure of confidential information and is classified as CWE‑201.

The affected product is the PressTigers Simple Job Board WordPress plugin; all releases through version 2.13.7 are vulnerable, so any site running that plugin or an earlier version is at risk.

The CVSS score of 7.5 indicates a medium‑to‑high impact, while the EPSS score of less than 1 % suggests that exploitation is unlikely at present. The vulnerability is not listed in CISA's KEV catalog. Likely attack vectors involve sending requests to the plugin’s endpoints that include sensitive parameters, allowing the attacker to retrieve the embedded data; the description does not indicate any other prerequisite conditions.